Questions tagged [drm]

DRM (digital rights management) is the enforcement of restrictions on access control to data through technical means, such as copy protection.

Filter by
Sorted by
Tagged with
-1
votes
1answer
47 views

securing certificate based authentication for linux and windows applications

I am wondering what are the possible options for the following: Let's say you have a software-agent you want to deploy on systems running both on Windows and Linux, e.g. an agent written in C++. Let's ...
14
votes
1answer
530 views

How do HTML5 DRM addons protect their output?

HTML5 has a DRM framework Encrypted Media Extensions (EME), that allows DRM companies to create content decryption modules (CDM) to decrypt DRM protected content. Browsers should use a sandbox to run ...
0
votes
0answers
31 views

How much security would s3bubble using AWS DRM Protected Video streaming actually be adding?

As the title says, how much security would s3bubble using AWS DRM Protected Video streaming actually be adding? I watched s3bubble's tutorial at https://www.youtube.com/watch?v=bC-tZhlYH8o but I ...
0
votes
3answers
165 views

How to track the usage of image

We are running an image content system where we allow the option to download the image freely by any user. Now I want to do the following things for those images: Track down the usage of the image ...
1
vote
1answer
45 views

What are the roles of the “PACKAGER” in a digtial rights management system?

I am studying about the basics of DRM systems. I came to know that the term packager is the application that encrypts the original content from the creator? Is there any other work this packager does?
0
votes
1answer
109 views

How to prevent Source code excessive usage and redistribution?

We sell our code to a company that they can run our code 100 times a month. We need to do a few things before giving the code to the company. Hide our logic (we can hide our logic by code obfuscation)...
2
votes
0answers
81 views

DRM implementation for offline licensing

I am improving one of the DRMs that I'm using for my software, and I have a few questions about how to best implement transferable licenses for offline computers. But first, a disclaimer - I am very ...
1
vote
2answers
68 views

python time since epoch hacking system variable

I am trying to figure out whether it's safe to let a payed software check its own license date validity using the client's computer the way this is done is by invoking time.time() function from ...
0
votes
1answer
337 views

How a website knows if a video has been watched or downloaded?

There's a video lecture streaming on a university platform that runs javascript. Can the system detect if I'm downloading the video (via IDM) rather than just watching it? In other words, how can a ...
2
votes
4answers
4k views

How to prevent source code theft in web application development

I'm developing a webapplication working with PHP, SQL DB and other technologies. I'm always considering someone stealing the source code or using it to other means. How can you prevent someone from ...
0
votes
1answer
47 views

Is using SecureString in combination with Xor considered secure enough for standalone Windows app?

The environment is Windows. We are using 3rd party tools in our app, and for tools to work they require method call and pass a license key that is a string. License.Import(string name, string email, ...
0
votes
0answers
57 views

How to restrict software distribution or make sure it should not be copied [duplicate]

I Want to release software and it is going to be hosted on the client system. How to make sure that it should not be copied or how to restrict unpaid users using the software. I have 2 questions. ...
14
votes
3answers
1k views

How does Widevine, FairPlay, and other DRM's work under the hood?

I am trying to understand how DRM works under the hood. There doesn't seem to be much information about it on the web so I figured I would ask here. After some attempted research, I found it ...
38
votes
6answers
9k views

Schemes/ Mechanisms that could provide one time decryption?

I am quite familiar with most of the common undergrad/grad security foundations; but I couldn't find anything related to this scenario: A scheme/system where a piece of data can only be 'decrypted' ...
0
votes
3answers
629 views

Should I trust signed GOG games, which are not original?

First I don't want to promote any kind of pirated software here, just don't know where and how to ask this question. I find out crackers share games released on GOG (which are DRM free), it's ...
0
votes
1answer
178 views

Server encryption, client decryption, without the client having the ability to encrypt?

Is it possible to encrypt data server side and then decrypt it client side; without the client having the ability to encrypt the data themselves after decrypting? I'm working on a license manager ...
20
votes
5answers
4k views

How to use FDE without needing to share the encryption password

We have an AI model which needs to be deployed on premise. The hardware will be provided by us, so we can do what ever we want on the device. The device is a mini PC running Ubuntu 18.04. The UI is ...
7
votes
3answers
1k views

Encrypt folder on Linux that can only be decrypted on that specific OS and device

Suppose I want to give a computer to someone that runs an application. I want to avoid that the program can be copied to another computer or be tampered with. For that, I want to encrypt the folder ...
4
votes
1answer
155 views

How do iTunes movie rentals work?

I've been wondering how iTunes movie rentals work from a security standpoint. Given that the "rented" files are actually downloaded to the user's computer and then played from there, it seems like ...
0
votes
1answer
102 views

Securing Delphi application SSL traffic from decryption

I wrote a VCL app using Delphi10.2. It has a simple activation setup, encrypted key is stored in Kinvey backend. The key to decrypt the encrypted key is hidden in the source code. Now in order to ...
0
votes
2answers
219 views

How to protect HMAC key embedded in code from someone who would copy entire source?

I and a friend are developing a web game. The front-end to back-end communication will be carried out by the means of an API. We realized that someone could then easily hook up to our API and make a ...
1
vote
2answers
187 views

Encrypting intellectual property on client side

Is it possible to effectively protect/encrypt intellectual property that is on the client side? Assume that I am selling a product (software) to clients, that contains intellectual data, for example ...
5
votes
1answer
1k views

How does video protection work when someone is recording their screen?

I forgot to turn my video recorder off and accidentally recorded my screen when I watched some series on some website. When I re-watched the video a few weeks later, I noticed that the part where the ...
43
votes
28answers
16k views

Discouraging users from copying images off a website?

Let me begin by stating that I'm aware it's extremely tedious or virtually impossible to prevent individuals from pirating content. I'm working on a website for a client who is a relatively well ...
2
votes
3answers
459 views

Returning POST JSON data securely?

I have a webpage (HTTPS encrypted and authorized only via domain credentials) that displays grid information. This grid information is received via a POST request to my server which will send back ...
1
vote
3answers
281 views

Why is it required to HMAC riv in HDCP 2.3?

In HDCP 2.3 (pdf) during the Session Key Exchange, the HDCP transmitter sends also the 256-bit HMAC of riv (HMAC-SHA256(riv, kd)). Why is it required? Does it prevent any attack?
1
vote
1answer
656 views

Serial key in pdf document

I'm writting a ebook and I'm gonna to sell it soon. I'd sell it at Google Play Store, but here in Brazil they don't accept PayPal as payment (and many brazilian don't have a credit card), so I think ...
1
vote
3answers
181 views

Per-User Image DRM for Finding a Leaker? [duplicate]

I'm managing a client that distributes their users images and files through one source. My background is heavily in development as opposed to security, and I'm of course familiar with some tricks that ...
2
votes
3answers
680 views

How to prevent unauthorized users from accessing an image on my server just by URL?

I have a few dynamically generated images on my server (of high business value), which are supposed to be viewed only via our mobile app. The image is simply loaded from the URL as PNG. How can I ...
2
votes
0answers
64 views

Protecting website from content theft [duplicate]

I have a website called http://example.com. there is another website called http://example1.com it has the same content as for my website. If I upload file on my website like http://example.com/test....
3
votes
0answers
2k views

How can Web Crypto API and IndexedDB protect data stored on the client side against user manipulation?

Imagine web apps that are supposed to work with no or only a few interactions with the web server, for example: a browser game in which the player's level and progress are to be saved locally. a game,...
-1
votes
2answers
127 views

How to identify the user who revealed private mp3 to public? [duplicate]

I have a service that serves mp3 files to a small circle of people. In the case of a revelation, how could I know who had done that? What technology could I use to sign every copy of the mp3 files ...
0
votes
2answers
94 views

Is there any way to track the status of a document sent to an external entity?

I'm wondering what the capabilities for document (PDF/DOCX/XLSX/PPTX) tracking are , specifically to determine whether a client has broken a non-disclosure agreement. Here's a scenario: Service ...
1
vote
0answers
131 views

How secure is a file on a raspberry pi?

Let's say I change the password for the root & pi user to something impossible to brute force, say 20 characters. Then in one of my files on my raspberry pi, I hardcode a password. Is this ...
18
votes
1answer
5k views

How difficult is it to intercept the POST response body when SSL is used?

For an Android application that is performing POST requests (JSON) over SSL and receiving a JSON object as a response, how difficult is it to get the JSON response? Is the easiest way to decompile ...
2
votes
1answer
359 views

Are the details about the Widevine bug now public?

There was a bug in Widevine last year which enabled downloading Encrypted Media Extension Content. They stated that they would give full details after 90 days. Was this meant for public disclosure or ...
-1
votes
1answer
186 views

Audio steganography and DRM

I recently made a post about an audio steganography program and had another concern I thought I might ask. I understand that most music has DRM in them. If I hide secret files in audio files with DRM ...
3
votes
2answers
480 views

DRM using embedded private key

I've started learning about cryptography used for DRM solutions, and curious to know if this is a valid solution for a custom embedded system running purchased software assets. ECDSA public / private ...
1
vote
0answers
25 views

Can files be retrieved from a VM instance state that was initially encrypted on a disk?

If I were to make a VM disk that was encrypetd, boot it, enter the encrypted passphrase and save the resulting 'image state' (of the running VM). Would this image have the 'encrypted' files easily ...
3
votes
1answer
225 views

How protected are files within a running encrypted VM on a possibly non secure hypervisor / host?

I've got a set of source code files (compiled C#) that I want to prevent direct read access to. The program will be running on the VM. I was thinking of storing these in an encrypted hard disk VM, the ...
1
vote
0answers
704 views

Can we screen record Netflix strems? [duplicate]

No I don't want to do it and I don't have a Netflix account but I have heard the different ways Netflix uses DRM to protect its content such as encrypted streaming and watermark. But someone can just ...
1
vote
1answer
6k views

How did this site prevent me from creating multiple accounts?

Disclaimer: I just realized this question may read a little bit as if I'm trying to promote this site. I'm not. Now that I think about it, I'm unsure whether this site even has a proper license from ...
2
votes
2answers
2k views

How do OTT providers protect LIVE streams?

For Video on Demand, DRM seems the way to go. I've been told that providers might be using a token-based system, but I haven't found any provider so far that uses token, just DRM (except Akamai, ...
0
votes
1answer
540 views

What is the mechanism to protect photos uploaded on social media? [closed]

I know water mark the photograph is one method to protect ones copyright over the picture. is there any other technique through which one can prevent or detect the plagiarism of photos.
1
vote
1answer
124 views

Digital watermarking for detecting Copyright infringement - video file of customer A and B have same SHA Checksums?

Sometimes I buy in a online shop video files (mp4). The online shop forces it's customers to buy with verified real name. In case of leaking his content the shop can identity who leaked it. I don't ...
0
votes
2answers
164 views

Is Amazon Prime DRM able to scan a LAN for devices and services? [closed]

My company has signed up for Amazon Prime to watch some videos. They were asked to enable Amazon Prime DRM. Will this open up a security hole in our LAN? I am worried that they could start scanning ...
0
votes
1answer
128 views

Best way to secure documents? [closed]

I'm currently tasked with securing our documents stored in our NAS. Basically, the minimum requirements that is needed are; 1) Watermarking Ability(Any file viewed/downloaded or printed will have the ...
1
vote
2answers
93 views

How to provide to your Webpage a security like Wix and how to break that security

I have read several articles related to the "impossibility to fully protect your Website from being copied (please, check, for instance: Prevent my site from being copied). So, how is it possible for ...
0
votes
3answers
484 views

Securing a video using encryption

Videos uploaded on Youtube or any other video streaming website can be easily downloaded by using 3rd party software. In order to prevent the viewers from sharing the video to unauthorised people. I ...
34
votes
5answers
7k views

Is it possible to embed information that is both nearly invisible to the naked eye and decodable from an external camera?

I am interested in watermarking a video for copyright purposes. The requirements are as follows: The watermark must be barely noticeable to the naked eye. The watermark must be able to be extracted ...